An Offline Hardware Security Assessment Approach using Symbol Assertion and Code Shredding

This paper presents an evaluation approach to analyze and prioritize the embedded software vulnerabilities against FIAs by using symbolic execution. The proposed approach is based on the code review analysis and highlights the potential software weakness points. It uses LLVM and its add-on named KLEE tool, which applies the symbolic assertion into the code under review. These tools are employed to obtain a vulnerability factor that is used to spot the corner cases in the execution paths of the code blocks. A case study has shown the effectiveness of the generated assertions in pinpointing the actual vulnerabilities.